News for hackers. Stuff that matters.

A comment on Stop using JWT for sessions (2016). Parent comment

Re:Stop using JWT for sessions (2016) by anon1252 on Thursday November 01, 2018 @02:11PM (#18356756)
> JWTs are a silver bullet, but it's nicer than rolling your own signing scheme.

you can use HMAC to sign session cookies as well, the issue isn't about signing.

[ Parent | on HN ]

There are no comments on this comment yet.